Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
File: e8sSfHzXeGBylriDhuiUrh3jhb8.mft (raw, json)
Hash identifier: nyLSk4fX79L0VELnskECKFjDdy0pYp8TvkgMdqJsMXU=
Subject key identifier: 95:01:82:DB:0C:C2:04:18:23:A5:66:52:97:A5:38:7A:8B:D3:3F:6F
Authority key identifier: 7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
Certificate issuer: /CN=7bcb127c7cd778607296b88386e894ae1de385bf
Certificate serial: 019FA1BB693B26F593740D52A34DFF0D620C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
Manifest number: 062A
Signing time: Mon 27 Jul 2026 04:00:41 +0000
Manifest this update: Mon 27 Jul 2026 04:00:41 +0000
Manifest next update: Tue 28 Jul 2026 04:00:41 +0000
Files and hashes: 1: UXWpgGFDnRE9Qd9B2_kQeDANeEU.roa (hash: 4rUA5GWn/3ql2gbHZLTVs1SZ20Xz3g2AjgFXRxPtMJw=)
2: e8sSfHzXeGBylriDhuiUrh3jhb8.crl (hash: ai8gPEkXtCY6YTStQOarBRpQRkWYsXztwBmY8ygmn3Y=)
3: kkmKgi6g6HFL37DCnaadKvfK-YA.roa (hash: yjFJ1aHJiDzMEJQJojyjv8H/6rRO5DIEZ/IoW8c9H7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:69:3b:26:f5:93:74:0d:52:a3:4d:ff:0d:62:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcb127c7cd778607296b88386e894ae1de385bf
Validity
Not Before: Jul 27 04:00:41 2026 GMT
Not After : Jul 28 04:00:41 2026 GMT
Subject: CN=950182db0cc2041823a5665297a5387a8bd33f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:71:f2:a3:23:78:43:74:49:88:b9:80:e4:86:
67:fb:ac:77:79:54:68:ee:02:78:32:45:cf:c9:85:
b1:89:9d:11:1a:69:bb:f0:71:49:52:23:f0:66:16:
94:e0:c4:23:7d:4e:b7:09:c0:8b:95:28:c2:5c:e8:
5b:1a:e9:50:ac:68:9b:28:3f:91:7a:6f:45:96:98:
14:6d:eb:c3:e9:b1:73:91:5d:07:48:a7:8e:38:84:
60:f4:9f:b2:09:d3:ae:0f:ad:f6:01:ae:d9:e5:fe:
c8:20:93:da:08:89:72:d8:2a:7d:1e:a8:43:2d:d3:
7c:83:7b:78:4f:1a:b0:70:d1:ee:56:97:f7:ad:55:
7e:7e:42:8f:0d:a7:0c:01:87:d4:8b:80:76:5b:db:
02:d5:e1:ee:b4:41:84:ec:f6:cb:c7:8a:3d:5a:f9:
5a:5c:3c:71:45:b9:57:87:a1:59:ab:2b:7a:db:01:
41:61:18:92:8e:15:a5:55:1e:e5:4e:bb:ad:bc:a8:
45:7b:1d:b4:34:61:81:8e:78:7f:49:fb:bc:02:07:
f3:4e:46:f1:56:c5:8a:62:27:b3:9e:81:1d:83:a6:
65:d7:12:39:e6:a9:dc:7d:64:d0:39:17:6c:2b:b3:
41:84:e6:9f:1b:d9:a7:b4:61:95:ac:db:5c:c7:ec:
6d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:01:82:DB:0C:C2:04:18:23:A5:66:52:97:A5:38:7A:8B:D3:3F:6F
X509v3 Authority Key Identifier:
keyid:7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:65:cc:0e:f5:1c:86:12:6e:04:e3:77:85:66:b1:e2:96:86:
78:00:18:ee:88:86:34:ef:72:53:cf:96:66:d0:68:a8:f9:4d:
32:11:0f:e9:ea:83:4f:6b:3d:17:4a:9d:94:0d:47:c2:48:16:
17:07:fd:a8:f2:4d:0a:8d:0b:00:73:ec:72:2a:4b:cc:50:f3:
c0:09:a1:92:71:8f:96:9c:10:0f:1b:4b:84:08:24:bc:58:6f:
f3:44:16:91:77:c8:78:33:cd:7c:ae:94:22:05:f6:bf:61:70:
b5:13:78:b0:ee:57:eb:4e:4f:0e:fc:d8:4d:df:13:4d:73:04:
70:e3:90:81:12:67:f4:5c:57:59:d5:fa:bb:a8:f7:62:2d:13:
13:f9:be:57:fc:f0:1b:ce:ae:b5:e3:99:86:ac:9e:14:14:b4:
53:cf:b9:37:80:b4:a8:b6:31:bf:29:a9:a5:6c:76:5d:c6:fa:
29:5c:38:7d:e9:ec:10:09:31:a7:33:3c:1c:cb:ce:cc:b1:5d:
bd:41:34:54:c0:81:bf:c3:1a:bd:2c:4f:ff:02:99:9f:3b:61:
b1:93:f0:87:0a:fa:0a:f3:f5:e3:13:57:a5:93:5d:4e:73:94:
e3:9c:64:b8:d5:66:40:1e:3a:60:47:f1:f1:86:19:e9:05:87:
6f:93:41:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:34:26 2026 by rpki-client